Should we just allow symlinks in chroots? As long as they’re not dangling perhaps?