do not allow files to be accessed directly