Or even just a proxy that can enforce the constraints