Don't we want to verify it's a valid json? Or even further, only contains those 3 keys we support.