Maybe it's a lack of imagination on my part, but how do spammers abuse self-hosted runners?