Respect the `@cancellable` flag for `RestServlet`s and `BaseFederationServlet`s.