pub fn validate_directory_beneath(root: &Path, relative: &Path) -> Result<()>
Validate an existing directory beneath a trusted root without following symlinks in any component.