We need validation: command validation using external service is a good trade-off