nancy is too safe with files