A path written as ${dir:<id>} can resolve under the agent's home, and a literal /home path may be it; both escaped the check (hq ADR 0266).
The node-engine writes those as root after checking the path, and the agent account owns its home and could swap a link in between (hq ADR 0266). No module does it today; this keeps a future one from opening the gap.
jochen