avoid creating symlinks with restricted permissions