Function resolve_for_write 

pub fn resolve_for_write(root: &Path, rel: &str) -> Result<PathBuf, Refused>

A path inside root to write: every existing ancestor must resolve inside the root, and the target itself must not be a symlink.