Disallow WebDAV MKCOL/PUT/DELETE requests to protected files

Currently protected paths can be modified by authorized user (or anyone, if authorization is disabled).