Merge "Require equivalence for mls restrictions on symlinks"