Note the need to validate that no-one *else* can send

We don't seem to have a way to say "pass these credentials"
other than intercepting the messages, but we don't want to
pass out our credentials to anyone who asks... sigh.