catch unauthorized client and show service account instructions