pub fn safe_segment(segment: &str) -> bool
Whether one path component is safe to place in a workspace path.
Leading dot excluded, so a derived name can never produce a hidden entry or either dot directory.