>>334998867
Obfuscating and renaming the parameters might wotk. Authenticating use login key once when you load into an avatar could work. So hard coding the toggles as inaccessible within the avatar unless user id matches.
Heck separate the download package of toggle parameters might work too