Return false from LoadMountInfo rather than call FatalError on CfReadLine error
Replace FatalError with ProgrammingError in unhandled switch (LinkCopy)
Push FatalError out of CheckLinkSecurity, return false if not safe to continue
Push FatalError out of PopDirState, return false if not safe to continue
Add enum PromiseResult, for cfPS