Server: allow empty restrictions

Fixes #1067