Comment 21 for bug 1552042

Correction - this is config drive doing the injection; injected_files are only referenced in config_drive and agent code paths.
Both of these occur at run time, in the guest context, so can't have access to the compute's devices.

I'm now happy that XenAPI is not vulnerable.