hosted files protection

only allow changing too (reading) and saving files that have been
deliberately hosted.  This closes a security hole where malicious users
could read any system file on the host by sending customised socket
messages from the client