How to set up a secure back end for hosting a shadow library mirror