That's interesting, the consumer UUID being passed in wasn't getting verified was it? That is probably a good catch.