Just a thought for KVS users:

Considering that the developer plays fast and loose with usernames and passwords, make sure that you don't have any legit info in your KVS. Go through and change all of the usernames and passwords to fake accounts that you make specifically for this purpose and that don't have any value.

I'd hate to find that this company is logging in to people's BA accounts and booking tickets on customers' miles.

One tip: I was having a hard time making a fake CX account. The key is, you don't want a Marco Polo account, just an Asia Miles account. The MP would cost $50, where AM is free.