Return an error if path is invalid

[WhyNotHugo]

Instead of panicking when a path is invalid, return an error which can properly be handled by the caller.

Note that this is a backwards-incompatible change, so the next version should be 0.10.0. Updating call-sites is usually trivial.