ncm-gip2: untaint file/directory names before calling chown
Fixes #18