Oh.  Is what's required likely to change in the future?

If not then I think we should enforce that here as well in order to save a request.

If so then we could entertain the idea of an API that tells the client how to validate entities.