API should show which players are on which teams when sending a request to /rooms/{roomId}/agents

I've been getting into data analysis lately, and I've been doing analysis using the intruder REST API. I currently have a script that notifies me when people in the same room as me have been team-killing within the past 30-40 minutes. I think it'd be a nice feature if I could also see whether that player was on team fire or team water. 

Also, I noticed that the password hash for locked rooms can be found through the API. I'm not sure if this is intentional or not, but in general, it's a poor security practice to make password hashes publicly available. Additionally, I did some more testing with the passwords and also noticed that the salt is static, which is also not recommended, especially if someone can view the hash of the room password so easily. All I'd need to do to go into rooms uninvited would be to crack the salt, and then cracking all the other passwords would be extremely easy with something like hashcat.