This would allow to have rules which apply only to behind-the-scene requests. Now for minimum code impact, if I can find a way to come up with a scope name which work in the current state of the code and which is guarantee to never collide with outside world...