A topic stores a user's account identifier. What must the agent avoid when retaining or sharing that value?

1. Validating the identifier before use
2. Checking the caller's access in the backend
3. Keeping the value in the correct supported scope
4. Confusing conversation state with proof of authorization or mixing it across users