reject symlinks for manifest checking