How we introduced organization-bound machine authentication while preserving the API contract customers already know.