Comment by petersellers

Limits the blast radius to only the files that the more limited user has write access to.