lib/access: make client_match() public.