[security] Strip special arguments so that user can't pass '-cmdline' through apply()/*dux*()