symlink-harden: be more paranoid about copying nameidata structure