As HC are considered as clients every function you want to call on HC or Server has to be allowed to call it everywhere. This could be a possible security problem if clients call functions on other clients they shouldn't, e.g. respawnFunctions. It would be great adding 2 more allowedTargets:

3: Target can only be any HC
4: Target can be any HC + Server