I can also do it by blocking all API calls that aren't local or from specific server