Safeguard against dumb `rm`