Function session_path 

pub fn session_path(dir: &Path, name: &str) -> Result<PathBuf>

<dir>/<name>.session; an invalid name is refused, so a name can not lead out of dir.