That ref is the userId associated with the session. For several apps, they require a user’s ID on the frontend so we provided that feature. Is it a security issue for your use case @thisjust. ?