Limit callvote arguments to MAX_CVAR_VALUE_STRING to avoid malicious users triggering a fatal error
Change g_password flags from CVAR_USERINFO to CVAR_NONE