SECURITY: actually reject messages with improper lengths