Yea we used to offer a public service (much like your site), and you could essentially skip right past that secret if you just passed through 'true' instead. When they patched that we figured it best to only grant a few people access using the key less they patch that as well.
I actually never did find out how anyone got the key in the first place, I was gone throughout like 2008-2011 so I ended up missing a lot of stuff some people I knew were doing.