server: Use rb_strlcpy() instead of strcpy().

An overflow should be impossible here, but be paranoid.
commio: Add error string for SSL trouble.
stats c: Simplify construction of flags string.

Perhaps this avoids false positives in static analysis.