MFT: Fix use of $@ to "$@" so that parameters with spaces are expanded/passed properly
MFT: bulk: Jail pkg-repo again. This reverts [c9ef811ac5]

We should keep this jailed to avoid pkg(8) and libarchive exploits in case some package has dangerous data in its manifest, etc.
MFT: Jail all package untarring in case of bsdtar/libarchive vulns