Make it return an error when you use `transfer from` when you're
not a secondary.

Add tests as well.

Fixes #310