prevent direct file access

Just a wee bit of hardening.