Ensure resolved filesystem path is under base path.