[JBIDE-13448] validate key filenames (prevent users providing paths)