Took a brief stab at this, though not exactly sure if the checks there ensure sufficient security, likewise I haven't tested it yet https://github.com/sgbaird/gavel/pull/3/files