The protocol inverts. A server asks the client to run the host's model, with no API key of its own and a human able to deny every request