Default to safer args for less and strings

less: http://seclists.org/fulldisclosure/2014/Nov/74
strings et al: http://lcamtuf.blogspot.com/2014/10/psa-dont-run-strings-on-untrusted-files.html﻿