which first lstat(2) the target and return EINVAL if it's a symlink, and then call ch{flags,mod,own} as appropriate. Removes the need for hokey code inside the tools themselves...