In the particular case of PATH, '' is the same as '.',
which is a bad idea from a security point of view.