I am using validator now and it's okay. I did have to write some custom validators and it wasn't too well documented. Unfortunately it's a bit hard to generate the right error messages for the user to see exactly where the misconfiguration is.