Protected assests and runtime dirs and added UserIdentity back (there's nothing sensitive).