so we can assume that `data` will *always* be an `int` if it's a `pk`? DRF ensures that?