Cryofame, the trick with the keys is that they have to be given to you by the server- if you just randomly generate one the server will reject it (this can be done by the server randomly generating a number and then sending both that number and an encrypted version of that number to the client).
By using large numbers (256 bits or so) it should be *pretty* difficult to hack.