[Ferret7446]

Isn't it fundamentally impossible to secure a client? You can always write your own app that sends exactly the same request as a verified client.