tl;dr base64 payloads in requests can be mutated to get past firewalls.
shoutouts to sinned aka Dennis Moran, who told me to get to hacking on firewalls like, years before I actually did. Dude got 2 of my bitcoin before dipping out on life, RIP. Your spirit lives on.