fix(cli): limit indexing safeguards to home and root