Now using path based security instead of principal injection and lookups