protect against unknown clients, except when running in migratable mode