How would you generate a signed cookie with access to anything under a specific sub folder? ie ``` - folder 1 (no access) - folder 2 (access) - file 1 (access) - file 2 (access) ```