Ensure user cannot specify bad parent_id.