Make Net::Ping::External safer

I'm willing to bet that somebody, somewhere, is going to be passing user input to this, and the fix is simple.

Caveat: I have no idea if the windows implementation of open3 supports anything but the string form.