When issuing a REST request for a file from a remote filebucket, it is possible to override the puppet master's defined location for filebucket storage. A user with an authorized SSL key and the ability to construct directories and symlinks on the puppet master can thus read any file that the puppet master's user account has access to.