MDL-43877 blocks: Files from blocks in my/ were accessible to the world