Work using append-only access, or Append+Read

[timbl]

Logically the process of importing data is a one-way transfer. If the code is careful to not update files (don't GET/change/PUT) just PUT new files and/or PATCH new triples, so the the agent which does the copy can be given just read and append, but no write access.

Streaming of course doesn't need Read access either - but the function of checking the archive is up to date does, and that is valuable.