[Exolent[jNr]]

I stand corrected.
It used to be that servers could not send "alias" command to players, but I guess they removed that protection.

There's still another flaw.
Players can type "alias NSC666x" and not get detected.
If you change the command for that, they can type "alias" in console and see what their aliases are changed to.