Invite third-party developers in our dev account exposes all our certificates. In the past Apple was very specific about NOT inviting developers from outside of the organization. Has that changed? In the demo he didn't check access to certificates etc, but how would the 3rd party developer sign and publish the app without access to certificates?