A legitimate agent should have a very clear policy about how they deal with their metadata