DDF-462 added first cut of pki filter and pki path validator