...and proxy your llm traffic with your own per session tokens – if it leaks, it doesn't matter, not a real token.