SECURITY: prevent direct download of backups
Merge remote-tracking branch 'origin/stable' into pkgr