Lock your WordPress login behind CloudFlare and a keyword only you know

Let’s use CloudFlare as a WAF to block any or all requests when it doesn’t contain a certain keyword. The keyword only we know