whoops. make sure we properly accept URIs as on_behalf_of