[plugins] add global forbidden path blacklist

Add ability to hardcode forbidden paths we know shouldn't be touched even
if specified in inherited plugins.

References #316 #72

Signed-off-by: Adam Stokes <adam.stokes@ubuntu.com>