Every search request carries a sig query param computed as sha256(query string) — no external secret, just a function of the request itself.
sig
sha256(query string)