Adresses CVE-2021-20229 (Incorrect Authorization) Signed-off-by: Daniel Golle <daniel@makrotopia.org>