prevent users from specying target directory inside template dir