- Accept 409 for playbook creation (unique per technique+type is correct behavior) - Space logins 13s apart to avoid 5/min rate limit on login endpoint - Reuse admin session from initial login to avoid duplicate login call