Fixup common_path_prefix
Switch to tarfile module for tarball extraction, remove strip/unsafe_mode
BUG Guard against extracting dangerous tarballs