Add check to ensure that users only pull clients to which they have access.

The access check is by ensuring that there exists a service in services
for which there is intersection between the logged-in user's clubs and
the service's clubs.