prevent the client from being able to update created_date and last_updated