Blob MIME types that can be served.
Validation is done loosely via content inference. Further validation can be done by a layer above this proxy, such as an image transformation service. When inference fails, the blob's type falls back to application/octet-stream. When that type is allowed, blobs failing inference can still be served.