Allow trusted symlink targets in OCI extraction