fix stupid vfs security check bugs