disallow read from the root directory