Cleanup from 3249

Securely free the strings when launching an approved exe, and address feedback from 3249.