Seems solvable by perhaps storing paths that don't exist yet on the filesystem in landlock's red black tree.
Workaround might be creating .ssh ahead of time