Couldn't you have a browser plugin that would verify your js is being served up from the correct source?