@Spike sorry otherway around you if you trust the instance you can trust the user is authentic.