add secure binaries to PATH only if not defined yet