I don't know. I guess you've just got to vet credentials? To avoid having a team to man the identity service perhaps;

If you need developer feedback maybe require the UX to be creating Pull requests describing the issue? Kind of like how pullup.io works?