O_NOFOLLOW is supported, since there are no symlinks in tahoe