Guard against destructive or insecure tasks run on the hostmaster site (improved).