client: guard against invalid paths