Bind symlinks as their destination path in the Sandbox on Linux

Unlike --symlink, --ro-bind won't throw an error if the path already exists in the sandbox.