Add some safety to directory traversal