limit font cache controls to actual font cache dir
restrict readable path stats to font cache