handle non-standard cubbyhole locations

[otakup0pe]

As of right now there are a bunch of hardcoded Resource.path == cubbyhole kinda statements. Should switch to having the default cubbyhole always be detected and handled, but other cubbyholes handled as a separate kind of secret backend.