Forbid certain paths within docker build ADD

Prohibit escaping the docker build sandbox with add commands.