Drop the Gameloft landing HTML here (with the client-side Shield loader removed from <body>). The middleware in functions/_middleware.js will inline Shield's script.js at the top of <head> on every request.
<body>
functions/_middleware.js
script.js
<head>