Also make the secure-boot-recovery pieeprom.original.bin a symlink to ../pieeprom.original.bin. There's no need to have different binaries so remove duplication.
../recovery/pieeprom.original.bin