If I create an external suitelet, would an end user be able to open the console, run some code... and just start pulling data from our records?