this should actually use the uuid var above (oops)

The effect of this is we can pretty much be guaranteed that any non dev key combo will fail to validate, unless someone successfully predicts the output of the function.