Resources should be rejected unless they match a whitelisted path.