only validate on deploy