one slash is all you need to make a permissions nightmare.