Release 0.8.67

Fixed

• security: one path gate for every file-touching command (#672)