Add a required header called "insert-seahorse-emoji: " to your API, reject any request that doesn't have it.