Ths is one of the beautiful things about eval in a browser/node.js combo. You can give each client a unique implementation of the communication api. so triviall

Ths is one of the beautiful things about eval in a browser/node.js combo. You can give each client a unique implementation of the communication api. so trivially, you can rename and reorder functions. more significantly, if you have an orthogonal set of operations, each client can can have a unique set of functions that are compositions of those operations. And if you're nervous about a specific client, you can just re-eval your communication api. Unhackable? no. but you have some options about what to do to a client you're not finding very trustworthy.