Must be a ref to something that actually was backdoored.