have some sort of authentication for communication with the botnet clients. Could. R session or request based