Pretty neat approach to adding an additional layer of security... I didn't finish reading the paper but did look at this component example:
E = (function() {
var F = function(x) {
var secret = 42, key = 0xC0C0ACAFE;
return x===key ? secret :0
};
return function G_F(x) { return F(x>>>0) }
})();
The neat thing about this is that at runtime you can't get to the secret. I initially thought you might be able to toString the function but that won't work because it will only show you the algorithm used e.g.
function G_F(x) { return F(x>>>0) }
Still, I was thinking if you could devise a plan to remotely fetch the source then you could, I believe defeat all of this extra security... unless of course the server can secure things such that the key is unique to each request...