dont expose the whole filesystem derp!