Codex reads files outside working directory without my permission