Authorize test requests only from configured clients