Do not allow path parent path refs in file hook
Implement drop privileges