If you go really out of the beaten path, a client that only reads from other instances could use the RSS feed to go around the signed requests.