Attachments must expose URL