protect against inner ".." in uninstall paths