Disallow hardlinks that increase permissions
Currently restrictions can be circumvented by creating a hardlink to the desired file.
We can prevent that by allowing a hardlink only if the inode mode is less or equally as permissive as the SLSM mode.