After splitting Apply into two functions, there was missing
recalculation of targetPath in CommitBinary() API.

Ensure that parameters are recalculated in both functions.

Also use '.check-perm' instead of .new to protect the downloading binary
saved as '.new' against a second use of CheckPermissions()