But in-n-out is *not* doing any vetting, itself. This either needs to be well documented, or perhaps throw an error in case the `holes` aren't well-defined?