Explicitly check proxy tickets in /serviceValidate