cheaters never win. let users try to cheat but call them out if they do