How do your path-only rules handle the many approaches for loading a file but making it appear to have a different path, such as bind mounts for one example?