add "deny access to backup files" test
Merge remote-tracking branch 'origin/4458-backup-no-acl'