Prevent arbitrary command execution via author name (issue #17)