Well, the server acts mostly as a single source of truth. The clients are the ones registering the shot, the server confirms or denies it.
My approach would be prohibitedly expensive, as I suggested the registration would also happen on the server. It would also result in bigger lags
I think the reason for this implementation is more the theft prevention. This sounds very mich like certificates to me