some new restrictions on manifests to hopefully catch bugs