fix unsecure move command; fix wrong path handling