I just realized that TeX by default can also read all files on the system that the process has permissions to read, and we may want to restrict that; this is done with the line openin_any = p in the file texmf.cf.

Axel