I can get behind "trust but verify" approach here.