WIP avoid unsafe module IDs passed on command-line