Allow to define paths that should be swallowed, e.g '/erp5/web_site_module/foo'.

Don't use this, but use slapos.recipe.certificate_authority
from the instance profile.

Then only allow what's in htdocs.

And use absolute paths everywhere.