Use symlink instead of exec to mark encrypted files in git-fs.