Nice build. I spotted a possible public exposure on the deployment; keeping details out of the thread for safety. If you're the maintainer, where should I send the notes?