Only allow reload from recipient