non-privileged app should not be allowed to use filesystem.