convert remote_endpoints into there own session id realm; if access failed