doesn't stop someone running a long running claude cli session in tmux and programmatically giving it messages... anthropic is fighting an unwinnable battle