I found these features quite simple to implement. What gave me a headache was advanced anomaly detection (both from the per-account and per-requester perspectiv

I found these features quite simple to implement. What gave me a headache was advanced anomaly detection (both from the per-account and per-requester perspectives) and handling. For me, there is no bottom of the well on those things, and they are the killer features of auth as a service.