Well, the problem is that if the (NodeKey) reference points to a node in the source workspace that was not being cloned. That's the only way to create a cross-workspace reference. So that should not be allowed, and we should throw an exception. Perhaps that case is not possible since it's caught elsewhere, but considering that we were not previously checking references it seems like this is the only place to do that.