Jafar the malevolent pool owner checks for solved blocks, any only allows a percentage to go to the pool bounty, and the remainder going to his personal secret bounty. To the miner, it is imperceptible, as the cheat percent is sufficiently low.
What stops Jafar?
Can this be done with a viewkey shared with pool members? Do any pools do this yet?