https://github.com/ansible/tower-cli/issues/385 get from pk / kwargs as needed, but run this through some pipeline that can't be missed accidentally.