pub fn openat_nofollow_dironly(
    parent_fd: Option<RawFd>,
    p: &CStr
) -> Result<OwnedFd>