Important security fix: block access to data directory.