SECURITY: pick up more argv length checks