isaacs: but yes, it tracks permissions for symlinks