update-index: refuse to add working tree items beyond symlinks