cp: by default, refuse to copy through a dangling destination symlink