Several checks are still missing from ratsd 1. Nonce validation. There should be a data size limit for the nonce 2. Ratsd should issue bearer tokens for request authentication 3. The E2E test and smoke tests for every builds