The argument for using discovery keys for the folder paths is to make it so you can't enumerate a user's dats with an ls.
Counter arguments:
- I actually want to be able to do that, especially when I'm debugging.
- You're not offering that much protection. If a program can
ls, it can just read the secret keys. The concern about reading bash history seems esoteric to me.