only allow card owners to manipulate them

Works for drag-drop, tap/untap, and contextmenu.