you're basically trading a known secret for a prefix in the proxy