Block access to all filesystem paths by default