Allowing instances to verify users would be a good idea I think.