On attachment create/edit pages, you can now see the text.
A little security can't hurt.