use 'exec-cd' instead of 'secure-umount'