"security_filter" is populated with all top level directories