Trusting clients is probably a security flaw