process.binding() can bypass the permission model through path traversal