guard against misbehaving clients; more precise error message