abuse the proxy API to deny updates