as we'll switch to mirrormanager, and that there is no way to retrieve an ACL (for ipv4/ipv6 addresses like we have in current mirror management system), it was decided in a meeting to just authorize (as a start) to allow content to be pulled through rsync directly and then try to register mirror on mirrormanager (other ticket/process)

DoD:

• third-party mirrors can pull from a declared rsync module/target
• iptables/ipset rules in place to ensure that it's not allowed for embargoed countries