If your sending events from client to server, what’s stopping a bad client from stopping a resource and keep sending fake heartbeat from his own injected code