For the record, I found a way fix this. I don't know if it's the best way but it works. The trick was to subclass the ClientDescription class and to override the IsCallbackAllowed method to put in the validation logic you need.
If you have other suggestions, please share.
Thanks.