API: safe-guarding against POSTing to create 3rd-party tasks with no {type} value