Use "program -- argument" where argument might contain dashes

Users, groups and system packages don't begin with dashes, neither does
our lock file.

Closes #84.