How to disable HTTP codebase from being provided to clients for package downloads?