No cryptographic validation of payload