Claw it

Claw Me scans the exact published snapshot before copying is enabled.

Your copy starts private and excludes the source’s data and permissions.