Explain why `strncpy()` is used instead of `strlcpy()`

A comment explaining that we go against the coding guidelines in this
instance and use `strncpy()` instead of `strlcpy()` as the source
buffer may not be `NULL` terminated - `strlcpy()` requires `NULL`
terminated sources (see issue #4672).