As this gives full invoice payment authorisation to the app, I added a budget to limit the impact possible misbehaving clients might have. You can limit single zap amount, and have an hourly and daily budget.