I think I would check if one cr already exists, if it does, operator sets a error status in the second cr as "duplicated" or something that explains that another ups cr is already in place.

This would require some kind of mutex locking to make sure that two or more crs don't get validated at the same time.