server: disallow bots to use private slots, refs #408