Been there, done that: https://news.ycombinator.com/item?id=7548257

I'm really surprised that we never thought of that. We'll try to prevent this exploit soon :-)