That could work well. I mean, considering it's open source we should at least try to make it secure right?

Would we write the magic string to the Server Configuration Service?