Add a security layer to event access

I watched this extension on a streamer channel, and digged on the documentation and actually I can get all click events of that streamer without any permission. Maybe it's not really a big deal, but maybe you can add a key on extension settings you have to use on your custom overlays in order to connect to the socket and get click events.