untrusted sources (clients) cannot update multiple records