Is it hard to validate things server side? From the little I know about the setup it seems like you publish from a client, and it gets pushed out to all clients automatically.

Hopefully there's a way to deny certain publishes from clients, cleanse input, validate etc etc on the server, before it gets relayed to the other clients.

For example the channel '/client_count' should never accept any publishes from outside the server. Wonder how easy that is to adjust.

It does seem pretty nice and responsive though :) Nice job.