[KevinH]

You said block IP's. It's trivial in most firewalls to block an IP address. I think Roland's point is the best. Don't give access to your pre-auth key.