Using `SafePath` function from `runc` (but had to create local copy as `runc` doesn't build on OS X). Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>