Finally, but done wrong. This should be done by 3rd party app (probably owned by government) with access token without sharing one's identity.