* 29891 use os.path.realpath to follow keyfile symlinks * 29891 add parameter follow * updated changelog fragment * add documentation and set default to false