more safety install script

invoke resetEXmem.php with shepherd.php don't run out of control.
But any scripts in epgrec dir are executable from remote.
It's still dangerous.

Why do you publish http port?
You can view epgrec with ssh port-forwarding
  instead of publish 80 port for remote.
Should you deny from remote access to epgrec dir?