Supporting CORS on API calls, at least some of them, would be a good feature. Keybase supports it for user lookups and for Merkle tree related calls, so supporting it at least for user lookups will be great.