Apps aren't isolated from each other

[A1Liu]

Apps can pretend to be each other right now by just passing the proper ID. Probably should have some kind of ephemeral key that is stored in the db so that apps can't just call each other willy nilly.

[A1Liu]

Ephemeral key could also tell us which instance of the app daemon is making the request, because different instances of the same daemon could be given different keys, so e.g. we'd know if we thought a process was dead but it's actually not dead, or if a process was killed and the port was replaced