Restrict access to /maintenance