I also think the files could be symlinks in unsafe mode.