At the moment we have IP based access lists for mirror's rsync access. It might be more secure to provide rsync over ssh as this allows for using ssh keys for access instead of, or in addition to IP based access lists. Ref comment by @kallisti5 #105