At the same time, there's a 'hosts allow' directive with the Pi's IP in the rsync config stored on each Win box, so it's not really invisible. Also, someone mig

At the same time, there's a 'hosts allow' directive with the Pi's IP in the rsync config stored on each Win box, so it's not really invisible. Also, someone might save the password to the BPC web frontend in their browser, so a sufficiently clever RW could still wreck everything here. I hope it's just that the web server needs some 2FA/OTP.