safe symlinking