flake.cc: computeLocks: Only verify overrides when they could change
builtins.pathExists /someNonAllowedPath