Consider a strict mode for API schema

[rglover]

Passing thought. I could see some situations where it'd be helpful to force input validation for all getters/setters. To ensure this happens, in the API schema, have a field like this:

export default {
  strict: true,
  secure: true,
  getters: {},
  setters: {},
}

The secure one here would force all endpoints to have an authorized check, too.