Function deletable 

pub fn deletable(path: &str) -> bool

Whether a deletion path from the guest manifest is safe to hand to an in-guest rm.

The manifest is read from the VM, so a workload that rewrites it to claim ../../etc/passwd or /root/.ssh was synced would otherwise get the client to order that deletion for it. Only a relative path with no .., no backslash and no empty component qualifies; anything else is skipped, not executed.