Comment by @0xfran • Hey

I like that. App level makes the most sense of course. Is the flag in the metadata?? Middleware makes sense too. Hopefully with some very clear policies a