Accessing attachments using attachment_id is now forbidden.