one place people put it is on the wire, so you put it in the cookies or you put it in headers, or you put it in secrets fields or in urls, so you're passing all that information back and forth all the time, which is really inefficient.