Every request goes through this app's stateless relay with your key in a header, because the SAN API answers no browser directly.