gate mysql allowAllFiles behind -lfa (#7473)