new security sub path validation