Support for chrooting, rejecting symlinks, and rejecting crossing mounting points on a per-request basis during static file serving.
This is a prerequisite for further introduction of openat2() features. No functional changes.