server-php: Block osjs:// write requests on VFS