I had a working implementation of handling redaction on the server side
on the old branch.
(Client sent a request with the reason, server handled anything else.)

The client still could not send requests that changed the author, so the
security was not jeopardized.