Disallow remote /MODULES for non-opers.