Protecting content provider paths