core: Refuse mount on symlink
update TODO