Fix #194 - be more specific about permitted endpoint paths and mappingSigned-off-by: Mark Thomas <markt@apache.org>