You could make the argument that having it in the URL is better than using a custom header, because customer headers may see mangling/blocking in corporate envi

You could make the argument that having it in the URL is better than using a custom header, because customer headers may see mangling/blocking in corporate environments (indiscriminantly). I don't think it's a strong point.