You are right, the script does not have a proper access control, and it also prevents other file types to be played altough they are valid (like WAV or gsm). The next beta release fixes all of that, but I have not packaged it yet. It also fixes some issues with the buffering that prevented the file to play if your network conditions or wav file was too long.