brp: force exec-filter to always resolve symlinks

Otherwise symlinks in directories such as /applications will jump out of
the filesystem before they can be exec-filtered.