prevent site.json files from accessed by anybody other than root