This might look a bit paranoid, but for `rm -rf` I'd feel better if we ensure that CVMFS_SPOOL_DIR is not empty and put in in quotes.