block access to tcpdf_6 subdir
also block running stuff in the updates dir
updates