Correct, this feature is limited strictly to this API. The information is collected from the options and I even strip the evidence of that setting prior to sending the options to the Document object.

The key here regarding security is that the base_dir will be enforced in safe mode and greater. There would be no way at all for the document to request that a file be written. Strictly quarantined.