is it not a problem that we don't call the validate method anymore? we could change updateProperties to expect the whole node object instead of path and properties, then transport is free to do whatever it needs.

and you need to copy the assertLoggedIn call to the new method