For tech preview we only allow files/units/etc. There are two potential use cases for directories:

1. namespaced image policy objects
2. hostname based networking policies

Which would allow the MCO to generally allow anything under a path to apply the policy. We should adapt the API and MCO logic to also allow paths.