enable ACL check, only allow user-self access peer over STUN by now, tag 0.3.0