getconf DARWIN_USER_DIR points to the 0 subfolder, not siblings

getconf DARWIN_USER_DIR returns /var/folders/<xx>/<id>/0/, so appending T, C or X to it finds nothing, and zsh fails with no matches found. The T (temp), C (cache) and X (code-sign clones) folders are siblings of 0, so run du -sh /private/var/folders/<xx>/<id>/* on the parent. Scanning that parent is what exposes the large X directory, which ordinary home-directory disk audits miss.