I am little confused. It is write-only from vendor side seems like vendor will sign something for authenticity. Something like token signature. So it has to h

I am little confused. It is write-only from vendor side seems like vendor will sign something for authenticity. Something like token signature. So it has to have my "pod ID", otherwise I can replay this data, with another "pod ID". Ofc netflix or your pod, can rotate this ID, but that also requires netflix etc to constantly sign new IDs.