neth: use ClientGuard