must unlock parent directory on error; fix symlink interpretation