ensure client belongs to user