remove local file access endpoints, make crc32 optional with sha256, response manifest instead of status if "createmanifest=true" .