While we wait on a future patch that could verify that the paths passed to
DirsMultiset have been audited, we still need to handle this error.
This patch makes it easier to bubble up and makes the error clearer.
Also, this patch introduces the subslice_index function that could be useful
for other - albeit niche - purposes.
It appears to me that find_dirs always returns prefixes. Why is this offset required?