Seems like a wrong way to detect for modding clients, a user can also have keys binded to commands or convars which can trigger false positives.
I suggest you check