That is what I did. Gossip (as a bunker) only honors connects that provided the correct secret. The user doesn't get bothered by junk connect requests.

Clients that don't bother to send the secret part of the bunker URL cannot use gossip as a bunker (which is unfortunately every client we have tried so far).

BTW I didn't actually make such a bot.