avoid possible attacks against hidden files; this isn't perfect