The problem is trusting the submitter. How do you make sure derivate work is not submitted?