Right now only server origin is checked for `Update` and `Delete` federated activities received in the `inbox`. Permit users to specify `server` constraint or `actor` constraint.