We currently mark attestations that reference blocks we don't have as invalid. We should instead be fetching those blocks.
Let's first check what other clients do, though. I can imagine this functionality could add potential attack avenues, from a security standpoint.