explicitly deny any other request than A