dont allow inserting fake activity from the client