Example: emails should be lower case. Should we do it in COSI "validation" layer as a "transformation" layer, e.g. lowercasing resource ID.