added the --safe-links option to disallow symlinks outside the