Fix the "last arg is the input file" assumption #3
Description
The file access whitelisting assumes that the last argument is the input file (if it's not "-"). This assumption is not correct because it can be defined with the -f option. It's listed as a FIXME in the code.