pub const RESOLVE_BENEATH: u64 = 0x08;
Block “lexical” trickery like “..”, symlinks, and absolute paths which escape the dirfd.