I am using Couch DB as a master DB for data and at the client side I have installed Pouch DB instances. Now, I would like to sync data from master to clients, but no client should have permissions to sync data back to the server. 

I know there is a one sided replication of db in Pouch/Couch Db but that doesn't restricts deliberate misuse of Couch db by unknown clients. (Any user can access my Couch DB instance's APIs and cause harm to it).

Note: there is no authentication system for the client.