Reject mirrors that make browsers load USB images as web pages

The combination of "browser, don't try to guess the file type"
and "I won't tell you what's the actual file type" does not work.

refs tails#18884