Should you validate that the user_id isn't the dungeon_master_id on the game?