What to do when an application misuses an API ...