SECURITY: length limits on many cmdline options