if i own my data, i should be able to tombstone it. and clients should respect that by default.
if a pervert wants to read the underlying json to find what i deleted, so be it lol.