restrict RPCTunnelServlet to *LocalServiceUtil