core: add access control for files embedded in e-mails.