Comment by neftaly

Cool – hadn't heard of that before. I was thinking more along the lines of a purely server-side approach:

  $_REQUEST["salted_SHA_hash_of_symmetric_TLS_key"]

You'd save the current key to a DB, and manually check it in future requests.