Is this supposed to be so strict? I guess someone might want to have their badge elsewhere on their site (like the homepage).

Also - would this allow a third party to come along and take over a dataset by providing the same documentation url?