...
In order to minimise risks of exposing high permissions account on the mdsh mds host the resulting aggreagate file is transferred from nds-feed to the mds host using a dedicated low premissions account. The aggregate is then moved to the finel final place on the mds host in a process innitiated within the mds host.
...