Return UNION_PATHS rebased onto a subtree rooted at prefix.
merge_toml_tables matches paths relative to where it starts. A merge of
one option's own subtree therefore never matches an absolute deny-list
path. Passing UNION_PATHS to such a merge does nothing at all. The merge
then replaces a nested deny list instead of unioning it, which is a
fail-open.
