only expose the XBMC virtual filesystem and not the whole API when used with a proxy

I hope the "Security implications" text is understandable. If you would like to change it feel free to close this pull request and make a small commit yourself.