Ensure root path blacklist always blocks