Security
- Only an admin or a client's owner can rotate its agent key (GHSA-f9mm-7r3c-wmw2). A non-admin user who had been given access to a client could rotate that client's agent key from the web, which disconnected the agent and returned the new key. Rotating now needs an admin or the client's owner, the same rule as deleting a client. Installs where non-admin users have access to clients they don't own should update. Thanks to @Artur12555 for the report.
- Tighter checks on two other client actions. Updating borg or the agent on a client now needs an admin or the client's owner, and the update buttons are hidden from other users. Browsing directories on a client (the folder picker for backup plans) now needs the Manage Plans permission, on the web and the API.
No agent change; agent stays 2.98.0.