Further defense in depth for external filesystems