beginnings of pathname security fluff