valid-bucket
safe/path
escape
parent_segment