You can audit the client either through source code or through very painful binary analysis.