safer root path