Protocol: echo back ENFORCED if client tries to disable server-enforced secure session