Make tombstones directory to not follow symlink.

Use file descriptor to change ownership.

Change-Id: Ie6919c549885d950975a003c4009b6e185df6e64
CRs-Fixed: 600072