forbid rm and mv on dynamically-generated paths