Disallow downloads if entity has disclosure risk