Fix the "last arg is the input file" assumption

[codedance]

The file access whitelisting assumes that the last argument is the input file (if it's not "-"). This assumption is not correct because it can be defined with the -f option. It's listed as a FIXME in the code.