Like musicbrainz, a replicated server shouldn't allow independent changes to it, because this could (will?) cause problems when someone tries to apply an incremental update.

Maybe we should have the same concept as master/slave, and only apply updates to a slave, and disable the submit endpoint if it's a slave.