I sat down with Michael Shapiro and I have some issues in the design document to resolve.
There are some additional definitions that should be added in order for the document to make sense to users who aren't familiar with the design already: API_ID, AGENT, API_KEY and API_HASH.
In the overview, I confused Resource with API_ID (it is described correctly later in the detailed design).
Expand and clarify the discussion about security. xdusage no longer stores a password but the api_key is still a secret that is kept locally that needs to be secure. Explain about agents and how they interact with the API.
Clarify the difference between an administrator doing an initial install, an administrator running the script and a normal user running it.