a project by dheidler
There should be a whitelist of services that can be managed without further authentication: