# Sensitive uploaded documents must never be served directly.
# All downloads go through an authenticated + permission-checked controller.
Require all denied
