how to ensure offline files are not accessible to unauthorised persons