protect hidden paths in directory router