recovery-action-set: set PATH exactly as security team requires