Let me explain this issue with the following example.
abc is the presentation _ (1)
123 is second presentation. _ (2)
I start remote Presentation of abc. with constant parameter of all presentations ?follow=r_rk7caxdncs , and Auth_key ngwd219. Now I found someone Auth_key, Even every active Auth_key can start Remote Presentation of every work.
The Impact is so clear from the example. I can use Auth_key of abc with 123 presentation or vice versa. or any Active Auth_key can start the presentation.
One more issue is constant follow parameter in every post. Gist: https://gist.github.com/zsellera/4fe26ee7c546a4d136f4