When comparing if a candidate path is already a subdirectory of a root path, we should compare the real paths, to ensure we canonicalize the paths. Fixes: #27493
