Is this an illicit file download attack vector?  Adversary sets `fileName` parameter to `configuration.properties` and `partNumber` to `demo` and thereby downloads the configuration file complete with credentials to access the mail store?