fix: publish to $SYS/ not allowed to prevent DoS

[robertsLando]

Fixes #597

Is this a breaking change in your opinion? @mcollina

[coveralls]

Pull Request Test Coverage Report for Build 770689628

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

• For more information on this, see Tracking coverage changes with pull request builds.
• To avoid this issue with future PRs, see these Recommended CI Configurations.
• For a quick fix, rebase this PR at GitHub. Your next report should be accurate.

Details

• 9 of 9 (100.0%) changed or added relevant lines in 3 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage increased (+0.001%) to 99.911%

---

Totals
Change from base Build 763934071:	0.001%
Covered Lines:	800
Relevant Lines:	800

---

💛 - Coveralls

[robertsLando]

@mcollina Ping?

[GavinDmello]

👍🏻