When scanning the WAR tree for active paths, traverse into directories
supplied by vfs Packages.
When the guard filter optional condition returns null, access will be
denied.
milestone