Create a plugin that blocks all image resizing requests except those HMAC signed with a key. Since the signing has to be done server-side, this would only be useful for ASP.NET apps, and only server-side pages could generate image resizing links.