APIs tutorials: add note for "Allowed Clients" setting