run janitor task roughly every minute
create log entry for client entry logs.
assign link objectid to blob on creation.
if an agent throws an exception, trap this and log it.
we don't need key because message from field is secured and we can match that
check for existing reject and ip_match messages before creating an ip_match
add central validation step for principals
add in hook for schema validation (not currently used)
add reject agent