We can't make fetch private though, so there would still be a way to bypass the init call for websoc
We can't make fetch private though, so there would still be a way to bypass the init call for websocket upgrade requests, right? So there's at least one place we need to remember to call init or add the header, whichever method we use to pass in the entity id?
