@walkeriniraq said to make the unauthorized modifications return a forbidden status code instead.