ncm-lcgbdii: untaint file name before calling chown
Fixes #17