FIX: ensure double flagging is impossible due to db constraint