Do not trust users when they provide an object