Added sanity-check that requested path lives inside file_roots