restricting the folder to whoever installed the bundle may not be a good idea depending on who does the installation but a dynamic group restriction could be a good idea