Client protocol now handles permissions-check response

still need to make it actually use it to abort the action, instead of getting a broken pipe