Protect file data with a one-time-token

Test Plan: currently untested work in progress

Reviewers: Blessed Reviewers, epriestley

Subscribers: rush898, aklapper, Korvin, epriestley

Projects: Wikimedia

Maniphest Tasks: T5685

Differential Revision: https://secure.phabricator.com/D10054