data files should be non-executable