Is the server somehow unable to inject an ID if the sender did not send one? Stop hiding behind policy and think for yourself.