I.e. ones that we never accept updates from, but who can otherwise participate in the exchange as usual. Needs #63 to work securely.