ALl good just wanted to make that note in case other stumble on this post and go “ooooh desktop app” and mistakening shove their secret into it.
I suppose, in theory, if the user is affilate+ you deny them access to the free item(s) and then they have to be bits enabled.
As you can check the user type in the API.