Disabling Anypath REST API possible?

[Querela]

Some REST API paths are available via jobdir and via anypath. I'm not sure if anypath is required as theoretically all job files should be reachable via the jobdir URLs.
Can I disable anypath because it publishes file system details and maybe provides access to any file of the system (not sure)?

heritrix3/engine/src/main/java/org/archive/crawler/restlet/EngineApplication.java

Lines 76 to 88 in adac067

	EnhDirectory anypath = new EnhDirectory(
	getContext(),
	engine.getJobsDir().toURI().toString() /*TODO: changeme*/) {
	@Override
	protected Reference determineRootRef(Request request) {
	String ref = "file:/";
	return new Reference(ref);
	}};
	anypath.setListingAllowed(true);
	anypath.setModifiable(true);
	anypath.setEditFilter(JobResource.EDIT_FILTER);
	router.attach("/engine/anypath/",anypath);

Examples:
https://localhost:8443/engine/job/myjob/jobdir/crawler-beans.cxml
https://localhost:8443/engine/anypath//heritrix/jobs/myjob/crawler-beans.cxml
For myjob in in the job directory /heritrix/jobs/, and the file crawler-beans.cxml in the root of the job dir.

I know that the Wiki even warns/shows examples how scripting can be used to run arbitrary(?) system commands. ref