hardening: verify that filesystem subpaths are indeed under rootDir

[rchincha]

[rchincha]

Although I think the callers look safe wrt to this right now, I do think it would be worthwhile to add a check to make sure that the filepath.Abs(dir) is a sub-path of is.rootDir.