prohibit all access by default, and only allow superuser if according settings are set
forgot file..