ensure symlink creation is safe