Add checks to incoming events over federation for events evading auth (aka "soft fail").