btw how easy it is to migrate away from the authzed hosted service to a self hosted k8s application? I am just worried about the lock-in.