oh, I get it now: force someone to use a construction function proving it is non-empty. A backdoor will still be needed for performance purposes.