[datasets] Prevent access to files outside dataset root.#828