pub fn normalise(rel: &str) -> Result<String, Refused>
a/./b/ → a/b; refuses absolute paths, .., NUL and the empty path.
a/./b/
a/b
..