PLXCOMP-220: defensive checks to avoid passing negative uid/gid into TarEntry or encoding into tar output stream