Security

Protected paths What paths are protected on server?
Token handling How should auth token be managed?
Public access Is deploy helper publicly readable?
Symlink restriction Are symlinks supported in ZIP?