Needs to be a fork.

Related: https://trufflesecurity.com/blog/anyone-can-access-deleted-a...