Attachments uploaded to our internal repository should not be visible to external customers.