Require identity on delete, not get