What prevents a Sandbox mode program from just using a chain of `··`s to access the root?
So for example, if you have an open dirfd with the LOOKUP capability when you enter the sandbox, you can access the following relative paths:
".", "./foo/bar", "./foo/.."
But you cannot access these relative paths:
"..", "./foo/../..", etc.