harden calls to strncat