disallow viewing of local metadata for central server