is it a security precaution to enforce the uploaded? what if i have a command that wants to import images from a directory, can i still do that?