I don't think that works - they have to tell me their server_seed before I tell them my client_seed. That makes the PRNG seed dependent on the SHA256 hash of something out of their control.