Use the safe-rm utility to replace your system rm binary with a version that checks the path against a blacklist before continuing.