What would prevent a malicious party from 'reaping' identies by force?