spec tests for all created files; more secure default for files we create
o/g/p testing for instance directories
fixup travis.yml