Make security warning on contains() more obvious.

The dire warning about canonicalising paths before calling
FileUtils#contains was present on two overloads but not the
third. Added it there to try to make it harder to miss.

Test: Builds.
Change-Id: I983fe86e57ff3f7052f4f5d55f2bbd9e5740429a