have snprintfs pass strings more safely