read-cache: optionally disallow HFS+ .git variants