the way I had the feature in mind, it would stop any "load" unless it is authorised by you, or the MD5 matches to last load. Even if that was a DDE request.