by default, entire request data is validated, but you can set the namespace in runtime