your are removing realpath. This alters the security behavior of rrd_daemon your comments do not elaborate on this change.