As https-only becomes default, tests are adapted in order to follow new
approach, case by case, or the redirect http->https is asserted, or https
access is used instead of http.

This is required for Python 3.7

- move or link instead of copying
- don't set too open permissions

See merge request !747

   This would allow the webrunner invoke it to bootstrap the instance
   rather them create the folders manually.