improvement(broker): don't reject unrestricted client if there are no restricted proxies
I.e. match it with an unrestricted proxy (if there is one).
The old behavior exists since the inception of the restricted vs unrestricted feature, i.e. 0052c0e1