The file at a manifest's location, once

Serves the encrypted file (a compact JWE) of a manifest's location once, within 15 minutes of the manifest request. A used or expired location, or one of a share that stopped since, is a 404. HEAD is refused (405), so a link checker never uses the location up. Rate limited with the manifest route. Recorded in the audit log (share.access, outcome file).