Implement `tell` in MDS

Yep, I had been looking at denying session objects to connections without valid cap strings, but didn't go that route.  Changed to assert.