(From a cost perspective, I would think you might want to move the API calls to core, and have node call core, which could then call the sender API with a key that only you know. That way you can continue to send emails out of the box for people using your hosted service but not for people who are self-hosting core.)