Reading this again, this is awkward.  It makes no sense to me in context.  I would instead suggest:

  * <p>
  * Only refs allowed by this filter will be sent to the client.  This
  * can be used by a server to restrict the list of references the
  * client can obtain through clone or fetch, effectively limiting the
  * access to only certain refs.