untaint arg passed to execlp
fix unsafe tempfail
fix enqueuer