Tightened client/controller message seals