If we no longer require globally unique tags, this can be replaced with either (a) a local ID, or (b) no ID at all, just identity.  That makes this less complex for client validation, also, since it no longer matters if someone else thinks that "redhat" is a good name for a tag matching RedHat stuff -- an increasing problem as the scale of Razor in user count for this deployment grows.