Add assertion for unsupported fixtures

also don't allow existing apps to download fixture updates if privilege is not present!