there's a symlink attack vector present-- how to avoid?