mksh: port bashisms to mksh-safe (process subs, DEBUG-trap history hook, direnv, cd- alias)
wip: emergency backup (power outage risk)