Validations have been added to the public apps API to ensure that read-only fields cannot be updated