Protect against symlink attacks on MBX lockfile in /tmp as best we can: