core: Do a use module acl check for file paths served by modules. Fixes #814