Untaint module name before loading it
Use 3 arg open