This is to fix a vulnerability. The user submitting the job
**must not** be able to write a file outside the job dir
(for example by submitting a file named "../../something")