weird filename safety: wrap @path in realpath

As in #2623. I didn't investigate whether AIR installer supports
the doubledash convention.