symlink-harden: do a more thorough copy of nameidata for correctness