daemon: return "access denied" if a service is not allowed