Validate an archive entry path, returning a reason when unsafe.
path recorded in the archive
rejection reason
Validate an archive entry path, returning a reason when unsafe.