allow package structures to say that external paths are ok.
defaults to false, though some package structures that do not have executable code capabilities (e.g. wallpaper image sets) may wish to take advantage of this