When a host requests a template and that's not allowed (e.g. because the host is not in build mode or the token is expired) we should notify the user about that (either via a ui notification or via a host status, the former is probably best).