files: token-gated file door