Offsy builds

Static file-name gating avoids storing a password in JavaScript, but it is still only a convenience layer. Use host-level protection for sensitive builds.