Verify client side key creation?

[kersten]

This should be a discussion to be able to verify a creation of a non exiting keys in the database. As for now, every request is able to create new keys. This enables bots or script kiddies to flood the database with useless data.

[kersten]

I prefere a sort of middleware for translate.me where the developer itself is able to decide which user is able to create new keys. With this implementation translate.me would only check if the given middleware returns true or false. After that the module inserts the key or not.