throw ForbiddenException when client is not in server's listen.allowed_clients.