1 release new api to validate inapp purchases
   2 nobody uses it
   3 hire Russian hacker to show how to exploit old api. Everyone fears Russian hackers.
   4 ???
   5 profit