So we also need to protect them when loading them in `clientURL` and so on. Right?