Prevent server side override of invitee role
Don't permit billing params if not owner