{
  "description": "Create an endpoint-scoped PIN. TEMPORARY requires both validity timestamps; PERMANENT forbids them. Validate increasing, nonexpired instants and declared restrictions before dispatch.",
  "type": "object",
  "properties": {
    "name": {
      "type": "string"
    },
    "pin": {
      "type": "string",
      "writeOnly": true,
      "description": "The code entered on the keypad. Leading zeros are kept."
    },
    "kind": {
      "type": "string",
      "enum": [
        "PERMANENT",
        "TEMPORARY"
      ]
    },
    "validFrom": {
      "type": "string",
      "format": "date-time"
    },
    "validUntil": {
      "type": "string",
      "format": "date-time"
    }
  },
  "required": [
    "name",
    "pin",
    "kind"
  ],
  "additionalProperties": false
}