Can we rename this function to something like `whitelistSafePath`? It might just be the `Prefix` part of this method name that makes it not entirely clear.