How do we know your software will not empty the account funds at Mtgox ? Is it possible to restrict its privileges regarding the API ?