1. A computer system to: provide a filesystem; export a shared directory of the filesystem for access by a consumer application over a network; determine whether one or more protection criteria of the shared directory are satisfied; in response to a determination that the one or more protection criteria of the shared directory are satisfied: automatically move one or more file entities from the shared directory to a protected directory; and prevent performance of file management activities on the one or more file entities of the protected directory by the consumer application.