pub fn contained_at(root: &Path) -> (bool, String)Expand description
What [approvals] contained comes to at root, in one line: the
commands the sandbox confines run without asking, or why every command
that is not a check asks — what init, new and doctor say.