userpref: correctly NULL-terminate arguments in string_concat calls