fix permission escalation hole with pipes