tweak: bash tool, ensure cat will trigger external_directory perm