SECURITY FIX:  Custom borg names sanitized and copytext'd to MAX_NAME_LEN