secure filenames
ignore caches