inverted security model for files (fail-safe)