hardening: world-writable directories: revamped