[fix] Prevent www-data to access progress folder.