This is racy--if two accounts add the same key at the same time, they can both pass this check and then both add objects. Better to make key unique and then check for failure at save time.