🔒 Security Notes BMW CarData is a private API — use responsibly. Never publish or share your id_token / refresh_token. Tokens expire automatically; the bridge refreshes them securely. Keep your Mosquitto broker private or protected by authentication.