.zshrc: tighten chpwd ()