more robust: protect_args does not work with rsync 2.x from macOS, and is not required in typical situations;