enforce a key on our end so we can kick out clients