You've got it, GenCat--except when T has reason to believe you're a threat to yourself or others, you call the shots.
Ts cannot touch you or require you to touch T in any way, even a handshake, unless you are fully in agreement. Ts can't sit next to you if that makes you uncomfortable.
Ts can't require clients to show cuts/scars/etc. They can't require that you bring in old diaries for them to read, give them access to your FB page, or any passwords to anything ever.