Nice to see someone offering public borg hosting! I have two security questions: (1) Are you doing any hardening of the borg remote side? The server is pretty

Nice to see someone offering public borg hosting! I have two security questions: (1) Are you doing any hardening of the borg remote side? The server is pretty complex and it has lots of code paths which can be exercised by a potentially untrusted client. (2) Is there a way to protect compromised clients (like a cryptolocker)? borg offers "append only" mode, but it does not allow pruning (obviously). And trying to run "prune" using separate trusted connection will commit untrusted changes as well.