I recommend reaching out to your VPS hosting provider to see if they will consider using a solution such as KernelCare's free patch set with symlink protection:
KernelCare support said that the KernelCare extra/free patches (for symlinks protection) are ready only for CentOS 6/7 kernels and not if the server is running Virtuozzo.