forbid access to cleanup.sh