Repeated rescue runs such as `dsh rescue --from-default-profile web` failed because the target profile already existed. The option now assembles a fresh template copy in a staging directory, moves it over the target, and deletes the previous profile; a failed move restores it.