You can have flags work in a pull fashion, though. At boot, and every 5 minutes, query an endpoint which returns flag values. You don't need the client to send any information about what the user is doing.