Turns out just rendering is enough to bypass everything
Log the client key with each request line