In-band signaling can never be secure. Doesn't anyone remember the Captain Crunch whistle?