Handle symlinks in goblins

[paradoxengine]

Goblins are currently pretty dumb when it comes to symlinks, and we need a good strategy to handle that. In particular I'm thinking about the "fake" chroot that using the "rootdir" directive provides, which is trivially broken by symlinks.