     # information on the parameters it accepts. Beware, this hook
     # is asynchronously wired in, so consult with `async` package.
     # Please be sure invoke the `next` arg to proceed, if relevant.
+    # This implementation marks legitimate requests ok for duplex.
     headers: (request, response, resource, domain, next) ->
-        return next() unless response.statusCode is 200
+        assert mark = "Demilitarize %s request"
+        assert statusCode = try response.statusCode
+        return next() unless (statusCode or 0) is 200
         sha1 = -> require("crypto").createHash "sha1"
         key = (x) -> "securing:rduplex:token:#{x}"
         gen = (x) -> sha1().update(x).digest "hex"

    # to be good to go through the screening process. This is good
    # place to implementation various schemes for authorization. If
    # you wish to decline, just don't call `next` and close socket.
    screening: (context, socket, binder, next) ->
        sha1 = -> require("crypto").createHash "sha1"
        key = (x) -> "securing:rduplex:token:#{x}"
        gen = (x) -> sha1().update(x).digest "hex"

            assert.ifError error, internal error
            @redis.expire gen(key(u)), 60, (error) ->
                assert.ifError error, internal error
                logger.debug mark.toString(), u.bold
                assert value >= 1; return next()

    # A usable hook that gets asynchronously invoked once a new
