Both publishers and subscribers are being served by the same RPC server (the default), this may mean that a subscriber can make publisher RPC calls and vice versa.
Create separate servers so that only publisher RPC calls are available on the publisher port and only subscriber rpc calls are available on the subscriber port.