Rather than persisting rejected events via `send_join` and friends, raise a 403 if someone tries to pull a fast one.