Comment 2 for bug 1006414

Ok, however the metadata is constructed with user data, e.g. 'self.name'. I hope its not possible
to do inlining tricks with that.

(Its also used directly to loads from the replicator, but I guess someone should not be able to
trigger such requests (but mind header injection attacks via proxy)).