Giving powers to others is really tricky. All it takes is one idiot with bad intentions. At least nothing is stored on your server. Just urls. But still