This way we ensure that it actually exists in the database, rather than blindly trusting user-generated input.