Throws specific exception for denied entry to a cluster

Throws ClusterEntryDeniedException instead of the more generic
IllegalStateException, where CEDE extends ISE. This is so that it can be
caught specifically without resorting to looking at exception message.