move directInsert/update/remove back to server-only to mitigate undesired behavior of having validated versions still being called