Insecure symbolic links

replaces #61