Enforce debits === credits on client side, but not server side