Different deployment scenarios have different trust models for relays:
-
Untrusted relays: Use Private properties for all sensitive metadata
-
Semi-trusted relays (media switches): May have access to metadata keys but not payload keys, enabling switching decisions without content access
-
Trusted relays: May have full key access for transcoding or processing
Applications should select the appropriate protection mechanisms based on their relay trust model and privacy requirements.