better lock-down for which connections can chat and which ones can not.  Better error handling for file piping to clients