all data is included in the federated status_message, so we can validate
on receive. add the photos to the status_message before save.