changed: runtime now dont add remote services to their local roster, if
the remote runtime (that was sending a GET Request containing this
remote services) is not in the runtime security group