open.2: Clarify that openat()'s dirfd must be opened with O_RDONLY or O_PATH