We want to change the owner of the symlink, not the file it points
to. Yes, this made the secret leak every time. :)