In order to safely expose management_project_id on create we need to
apply the same validations as we do on update.