And yes, SSH has the ability to stop most dupes. You require that players submit their certificates via outside means and authenticate the user. If only allowed client certs could get in, then only those that have authenticated with the sysop could play. The problem then just boils down to the level of authentication the sysop would require.