File attachments in restricted categories should be restricted

[codinghorror (Jeff Atwood)]

It is highly unlikely we will work on this until a large paying customer asks for it.