Defend against symlink attack by another process running as exim