Can you document how the referer-based protection works in a little more detail?