I may have to come up with some kind of "query complexity" measure if I want to make it robust against abuse though