So how might I restrict the read paths if I am running codex as a plugin in vscode?