A company hosts several users' LangChain conversations. Which state-management practice is appropriate?

1. Associate stored state with the authorized user and conversation
2. Treat a model-generated conversation identifier as sufficient authorization
3. Store every user's messages in one unrestricted global history
4. Expose the entire persistence backend through an unrestricted tool