Also restrict the filenames clients may specify in a filemeta to some safe subset, as a future proofing measure.
Andrew Mayorov