work around browser security theater