Restrict guest remote permissions and members.

Note that I also included the owner check on the watchers section in remotes#show because, if there is no owner or member, then the key indicating either is pointless.