can't secure sub-paths with current blanket recursion

[rjmoggach]

I like that everything below a URL is currently secure but I'd like to have another layer so that permission can be restricted on arbitrary sub-paths as well.

eg.
if someone has a token that gives access to /private/big_job/
I'd like to be able to restrict access to /private/big_job/internal/

not too hard and won't break the models... just need to adjust the use_token view. coming soon...