Add strict kickstart check in the API, again should fix #939.