Annotation importing now performed securely (only by admin of both src and dst)