it's mostly companies that have already built a distributed system and/or have complex authorization requirements