proper untainting of path variable in path_for_open