This is the first use of server-side js that has made a lick of sense to me as anything other than an experiment.

I think in terms of security and flexibility the API may wind up being a lot more complex than it is now. Maturity aside, clearly an excellent idea and work so far...