That'd also block anyone from API raiding us, but we can also put limits on API calls I believe