Just to check, we should _not_ support doing this by the pk id, since we never expose those anywhere in web services.