dont protect from forgery, because slack doesnt