Extracted from #5693
The remote participants should honour their publishing permissions, but even if they do not, the clients should ignore the received streams of a remote participant without publishing permissions (similar to the safeguard applied to "force mute" messages):
- Do not try to connect to a participant without publishing permissions even if the participant is publishing
- The HPB blocks offers from participants without publishing permissions, so this would not be strictly needed in that case
- Stop the connection with a remote participant when the permissions are revoked even if that participant keeps publishing
- The HPB does not stop the connections when publishing permissions are revoked, so even with the HPB a remote client could misbehave