Forbid wrong signature request instead of ignoring

Access rule must restrict access in case if signature is wrong -not just silently ignore.