Closing security hole, UPnP server should return root filesystem lising with empty ObjectID