The deny-rsync script from bug 3945.