don't prompt guests for a password if they're accessing an embedded public file.