Don't allow clients to see rooms they aren't in

[mqp]

We don't have a use case for this in the current product, and we don't want to allow it anyway unless we have a use case since we want rooms to be private unless their ID is shared.