defensive directories