the assumption is that if you're using them to show a list of, say, documents, once the user clicks to view the document, a check would be issued with the document's zedtoken at that point