* Link names in headers are allowed to have `..`
* Implement unpacking xattrs on Unix
* Don't fill in atime/ctime by default (matches tar behavior)