pub fn normalize_under_root(root: &Path, candidate: &Path) -> Result<PathBuf>
Normalize a user-supplied path and ensure it stays within an allowed root. Rejects absolute candidates and any that escape the root via ...
..