Add deselected paths controller setting
Tighten restrictions on populated and selected paths
Disable select with populate
v0.6.4 Tighten security around populate and select