[security] Prevent arbitrary command execution via author name (issue #17)

As per issue #17