Ahh, the "program" is allowed to access trick.
This one was fun to put to the test. We learned pretty quick to rename our app (example at https://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=66443&lngWId=1 )
So now my app can name itself and sidestep the true firewall.
It was a good idea.