narrow access to user info only to privileged users
missing import
Provide an API call for the service clients to send user feedback