[Philip-J-Fry]

How? If you're validating a server, sure. But a server validating a client?

Anything you ship with the app can be extracted.