code: function(req, res) {
      var copy = _.extend({}, req.bin);
      copy.sourceOnly = req.sourceOnly;
      this.protectVisibility(
        req.session.user,
        copy,
        function(err, bin) {
          res.contentType('text/plain');
          var file = binToFile(bin, { proto: req.secure ? 'https' : 'http' });
          res.send(file);
        }.bind(this)
      );
    }
docs: TODO decide whether this is used anymore