This method is pretty much identical to `valid_incoming_path?`.  It's probably worth extracting the common functionality.