Following discussions, it appears that experiments will be able
to only change a fixed prefix, i.e. /castor/cern.ch -> /eos/cta<instance>,
and not the deeper path components.
Moreover, we need to call getPathForFileId() on missing paths,
therefore an extra synonym + grant is added here.