Fix REST rendering of symlinks to restricted paths (OMS-346)