(the gist is: we need to walk symlinks to ensure that we know their destinations, but the input path basically needs to be preserved verbatim)