diff --git a/src/daemon/pipewire.conf.in b/src/daemon/pipewire.conf.in
index b0628dc4f..af3936d4c 100644
--- a/src/daemon/pipewire.conf.in
+++ b/src/daemon/pipewire.conf.in
@@ -69,6 +69,10 @@ modules = {
                     access.allowed = [
 		          @media_session_path@
 	            ]
+		    # an array of rejected paths
+		    access.rejected = [ ]
+		    # an array of paths with restricted access
+		    access.restricted = [ ]
 		    # anything not in the above lists gets assigned the
 		    # access.force permission.
                     access.force = flatpak