more logging when paths are rejected as unsafe