unfortunately at that point it would be indistinguishable from running cryptojacking on your website
No. The client is doing the work.