I'm not seeing anywhere where the identity key is actually validated.