Add missing definition for how appservices verify requests came from a homeserver.