fs-mistrust: Add read_directory and remove_file to CheckedDir.

Closes #1117 (closed).

@gabi-250, does this do what you had in mind?

To the reviewer: Please think hard about whether I have screwed up any subtle filesystem permissions errors here in the fs-mistrust model.