Restrict UCF_UNIX_NAME_LOOKUP (symlink allowed) to restricted set of calls.