How the public sector can learn from the private sector’s use of an API-first approach