Is there a reasonable way to use untrusted gateways while upholding the data integrity guarantees? I think it should be possible in theory.