I haven't looked at ACME, but any properly-designed system should require the entire response to match some expected value instead of just searching for the val

I haven't looked at ACME, but any properly-designed system should require the entire response to match some expected value instead of just searching for the value as a substring.