secure file access api (limited to user folder and world folder)

this is a prototype implementation please review and make suggestions what may be missing