SOLR-3161 An incoming isShard=true should be limited to a SearchHandler. Protects against shards.qt=/update attack