Mutable content type on file update

The security rules allow a user to change the Content-Type of a file during an update operation. This could allow a user to change a file from a safe type (e.g.