codex at least has limitations on what folders can operate.