allow only certain root content