Now validating messages (minimal simple security for now)