security.json设置为true的时候貌似又问题

[FindTheRealMe]

Please answer these questions before submitting your issue. Thanks!
在你提交 issue 前，请先回答以下问题，谢谢！

1. What version of Go and cronsun version are you using?
   你用的是哪个版本的 Go 和 哪个版本的 cronsun？
   直接用的二进制包，cronsun版本为v0.3.5

2. What operating system and processor architecture are you using (go env)?
   你用的是哪个操作系统，什么架构的？
   linux centos6.5 ,x86 64

3. What did you do?
   If possible, provide a recipe for reproducing the error.
   A complete runnable program is good.
   你做了什么，遇到了什么问题？尽可能描述清楚问题，最好把操作步骤写下来，按这些步骤操作后能重现你的问题。
   当security.json设置为true的时候，下面的选项好像不管用，不论怎么设置日志中总是报错：

is invalid: Security error: the user is not on the whitelist.

job[/cronsun/cmd/ddd/4c92d7da] is invalid: Security error: the suffix of script file is not on the whitelist.

这是我的配置：

{
"open": false,
"users": [
"www", "apps","root"
],
"ext": [
".sh", ".py"
]
}

4. What did you expect to see?
   你期望得到什么样的结果？

5. What did you see instead?
   现在你得到的结果是什么样的？