PATH-untaint: only absolute, non-world-writable dirs.