Fair point. Do you have any specific reference in the OpenAI Terms of Usage that forbids this; had a quick skim couldn’t see anything.
It seems reasonable to separate your user side traffic from the back end traffic, especially to protect your actual back end API key.