Further, hub processing on commands needs to be done mainly for limiting
purposes - shares, slots, etc. Clients should do their own sanity checking
on messages that arrive, and should never trust what they get from the hub
anyway, so -specially for new commands- it is mainly up to the client to
decide whether to trust a command or not...

But speaking about hub bandwidth, hub should also be able to sanity checks on command it receives else it is the best way to waste hub bandwidth (see DC history to find cases of buggy clients sending invalid commands which where relayed by hubs because they were unable to verify the commands).

Eric