Otherwise, the result may point to outside of the root directory. This also sets CONF_FILES_REGULAR and CONF_FILES_FILTER_MASKED, as the callers will call fopen() or friends for the result, thus the enumerated results must be non-empty regular files.