Comment 6 for bug 1700573

I'm on holiday next week but I am attaching a patch which I believe addresses the issue of path traversal in the _opt_dir for finding package hooks if somebody wants to run with it. Otherwise I'll finish this up the week of the 10th and add tests for it too.