test disallowing sub directories