Stealth shell now prevents direct access without secret header by blocking the request with a 403