Use one live client per Whatnot account. The API rotates refresh tokens and a second client will log the first out.
Do not use the fleet to enter the same giveaway from more accounts than the plan allows, or to resell raw access.
Keep the app, its token store and your service keys private. Rotate a key if it leaks.