1. Added checks to prevent directory traversal vulnerability when external extractors create symlinks on the filesystem.
2. Added --run-as command line option to allow users to control the privilege level external extractors are given as well as the power to run as root if they so choose.
3. Added documentation to the README that describes the changes above.