3.0.0p2: oddities with copying files

I've got this simple copy configuration:

bundle agent copy
{
files:
    "/tmp/testfile"
       copy_from => mycopy("/tmp/testfile", "xxx.ncl.ac.uk");
}

body copy_from mycopy(from,server)
{
source => "$(from)";
servers => { "$(server)" };
}

The file gets copied OK, despite the server (with -v) saying:

cf3 Host yyy.ncl.ac.uk granted access to /tmp/testfile
cf3 Found a matching rule in access list (/tmp/testfile in /tmp)
cf3 File /tmp requires encrypt connection...will not serve
cf3 Host yyy.ncl.ac.uk denied access to /tmp/testfile

Also, at the client end, an empty /tmp/testfile./tmp gets created (as well as 
the copied file, testfile).

Jim