fix: use transfer with disabled security check on demand for changes too
feat: retrieve attachments by name

retrieve attachments to a document specified by id with attachment's
name.