"untrusted" is the issue here, and trust is built over time. In the meanwhile you can use the library and implement the server side.