make CLI aliases create files that only the current app can access