Path-Safe: Enabling Dynamic Mandatory Access Controls Using Security Tokens