When we create users with homedir under /var, they end up with NFSHomeDirectory under /private/var because /var is a symlink. This breaks consequent activations and requires that user overrides their home dir attribute with /private/var/... to pass the activation precheck. `realpath` should normalize the discrepancy.