make untar as safe as possible