issue #21251: disallow client requests to SYS