Ideas: - block puts without header in splitio relays - block .put(null) in splitio relays, implement soft deletes in client (mark with deleted: true) - only allow I/O under .get('splitio') ? - sign .puts() with group's secret key, save pub key under 'groupInfo/pubKey'