Yes, this is the way to go. In my case, it was just a hastily put together system to see if it would work. I got lucky that it didn't go wild and do a hundred q

Yes, this is the way to go. In my case, it was just a hastily put together system to see if it would work. I got lucky that it didn't go wild and do a hundred queries. Enforcing in the client is nontrivial, though.