Fix issue #1274 - file security on multi-site installations