How do you do that as a client developer? You would have to make a new release with a hardcoded blacklist? Your client already makes requests to some central server of yours to retrieve the blacklist?