add limited uid guard for message passing