Couldn’t you protect against that with something like com-amazon-secret-token?