this should be create and built.

I'm in mixed feelings if this should be part of the unattended controller instead, but with a notification to a user that he cant boot it, but still allow it to create?

or alternatively, maybe this should be a validation on the model? --> not sure?