Apache Airflow path traversal by authenticated user