Amazingly, https://github.com/mjg59/linux/tree/restrict_path_traversal actually seems to roughly work as expected do I attempt to upstream or not