[fixed: #51] Arbitrary file uploads, outside of experiments.