hardening deploy_cp_r