Allow admins to set LOCKDOWN, and force all users to log in to an account to view.
Don't 'lock down' static files.