26d723e0 broke this, but I have no idea how it ever worked *after* that
change (it probably didn't). The problem is that untarring checks for
"malicious" tarfiles and in the process, normalizes entry paths. If the
outer path is not normalized, the subpath check fails.