Block a user
PurgeSnapshots operates across all snapshot names, no per-name filtering
getTableCount uses fmt.Sprintf for SQL table name — potential SQL injection
ListSnapshots downloads manifests synchronously for unknown remote snapshots
deleteSnapshotFromLocalDB silently ignores all errors
--prune flag on snapshot create is a TODO
Restore: downloaded blob hash is not verified
Shallow verify path: deep verification is a TODO stub