First off, great product. v impressive.
BUT (always a but), I have a serverside p/w set up my wp-admin folder and the plugin seems to require something in there to run its auto updates.
In other words I get the serverside authorisation at the end of the page load as its requesting a page refresh. When i disable auto updates the problem stops.