Patient Set Viewer and Patient List Exporter create and write files.
Make sure web (HTTP) access is not allowed to this directory