While playing with packing up EESSI into a container I found out that compat layer includes some dangling symlinks and some files, unreadable to unprivileged user. May I suggest to add something like find $EESSI_PREFIX -xtype l to some test suite to find such files and fix them before rolling out new version?