&gt; It can be mitigated if your backup service provides two accounts for the same backup: an &quot;append only&quot; account and an &quot;administrator&quot; account.<p>That&#x27;s how Tarnsap[1] works (I think the author is the user cperciva)<p>[1] <a href="https:&#x2F;&#x2F;www.tarsnap.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.tarsnap.com&#x2F;</a>