Add security hole where we validity ourselves

Test that we're verifying consumer uuid when we modify
content overrides