restrict security-master's rsync for the archive