actually check the =g.okCheckout= access control before outputting any
files. This ensures that source code is protected if someone screws up
permission management elsewhere.


FossilOrigin-Name: 55091aaaab59653e7a945e1a7e35347513470bbd