more secure handling of jobname