code: func NewParanoid(fs fs.FileSystem) Tar {
  	return &stiTar{
  		FileSystem:           fs,
  		exclude:              DefaultExclusionPattern,
  		timeout:              defaultTimeout,
  		disallowOverwrite:    true,
  		disallowOutsidePaths: true,
  		disallowSpecialFiles: true,
  	}
  }
docs: // NewParanoid creates a new Tar that has restrictions
  // on what it can do while extracting files.