This PR adds symlink resolution when doing validation of paths to ensure they do not escape client allocation directories.