more strict client access