Anonymous FTP, or any other non-centrally authenticated file manipulation
or the execution of arbitrary code, is prohibited. In the case of FTP or
other file-transfer like processes, unauthenticated access is permitted
only if the access is restricted to a single class of read or write as
separate instances with human intervention to move files from one repository
to another.

For example, anonymous FTP may be used to distribute files for download only.
A separate anonymous FTP instance may be used to define a drop box in which
an anonymous user may upload arbitrary files, but cannot read or retrieve
the uploaded files without intervention first by a FNAL badged user manually
inspecting and moving the files to a download area.