[support] restricting image access