capsicum sandbox prevent opening a file if an element in its path is
an absolute symlinks to a directory.

Another benefit is we can now use the pkg.exec within scripts