Compromised client can fetch any payload

[Jasper-27]

Because the client is responsible for requesting the payload, if the client was to be compromised the code could be modified to request any payload in the payloads folder.

[Jasper-27]

A few weeks ago a change was made that limits to system to only being able to request files stored in the payloads directory, this reduces the impact of this issue. But a node could still request the wrong file within that folder.