Use OpenRoot API to fix issues raised by `golangci-lint`

[redbeam]

After b9fc67b, golangci-lint started to report issues that were not reported before, they were mostly silenced in 63cd794. Some of them (those related to Path traversal) could be resolved using the new Go OpenRoot API.