Reserved for docs about sanitizing and validating artifacts before they leave the host.
Scrub at the moment artifacts leave the private workspace, not after they are already public.