Check backup URLs before the agent downloads them

The agent accepts only http and https URLs and connects only to public addresses, using the address it checked.