Don't let client_mode run arbitraty tmux commands

Clients should not have the ability to run arbitrary tmux commands
against another user's tmux sessions.  Running 'wemux kill-server' as
a client will, in fact, destroy another user's session.