This app should stay private and explicitly role-gated.