Don, thanks for pointing out that this is a type extension and how to do it. Cool.
I like Walter's idea of requiring authentication to update the info. Perhaps it will be a forcing function that gets more party-management code written. Don's right, though, it makes robot attacks worse. Janine, yes this would definitely have to be turn-off-able.
Let me try to think further about dealing with attacks.