Use only paths that td-agent user can write to