Made restrictedTraverse public.

Changed logic for restricted traverse (which actually lives in
unrestrictedTraverse) to:

  - Check access for root when absolute path is used.

  - Call getSecurityManager just once.