Currently the kp-registry can be manually refreshed at any time by anyone at all simply by sending a POST request to the /refresh endpoint. This seems like improper behavior to expose this to any user. It would be best to remove this endpoint and either create a way to manually refresh the registry internally, or set it to be refreshed periodically. Refreshing periodically may also help with #38.
Currently the kp-registry can be manually refreshed at any time by anyone at all simply by sending a POST request to the /refresh endpoint. This seems like improper behavior to expose this to any user. It would be best to remove this endpoint and either create a way to manually refresh the registry internally, or set it to be refreshed periodically. Refreshing periodically may also help with #38.