If we allow this during page creation, we need somewhere to put the attachments until the page is actually created in the db, and some way to clean them up if they're left hanging too long?