trust, but verify. or... don't trust, and verify