Is it possible to restrict the ability to download a vApp as an OVF? In our environment, we can't allow the machines to leave our contained VCD environment, but it doesn't seem that it's possible to prevent users from being able to download catalog items they have Read access to.